Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-12_5ac61d5f6ecf9fb1159dd0d0cc13af86_cryptolocker

  • Size

    34KB

  • Sample

    240312-2f8tksee92

  • MD5

    5ac61d5f6ecf9fb1159dd0d0cc13af86

  • SHA1

    dfceb79e8d4a9260fbfd04219d98d6943b43d888

  • SHA256

    d07ccbf70ee7af8a34206cb8dd984271a0c7fb20ce5e89dfa5cfbccbb418081f

  • SHA512

    2adb0d6894cd8044bb1b86f12352bc0d2ae61ee285fe68808652f2f17adda0b630af610e891ad2c3fe8af3d7ec31d41559989ecf292f56ad7c568d82a0f11fc8

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kbo:b7o/2n1TCraU6GD1a4Xt9bRU6zAo

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_5ac61d5f6ecf9fb1159dd0d0cc13af86_cryptolocker

    • Size

      34KB

    • MD5

      5ac61d5f6ecf9fb1159dd0d0cc13af86

    • SHA1

      dfceb79e8d4a9260fbfd04219d98d6943b43d888

    • SHA256

      d07ccbf70ee7af8a34206cb8dd984271a0c7fb20ce5e89dfa5cfbccbb418081f

    • SHA512

      2adb0d6894cd8044bb1b86f12352bc0d2ae61ee285fe68808652f2f17adda0b630af610e891ad2c3fe8af3d7ec31d41559989ecf292f56ad7c568d82a0f11fc8

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kbo:b7o/2n1TCraU6GD1a4Xt9bRU6zAo

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks